$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: J+bJHhWDhSdjnybebmACChIdcLZ5rbQwpqzxPYE4ybI= Subject key identifier: 7C:2D:5F:21:FE:FE:84:B0:B8:1D:00:07:5E:85:76:03:2A:8E:35:34 Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 3552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 3538 Signing time: Tue 24 Mar 2026 14:17:03 +0000 Manifest this update: Tue 24 Mar 2026 14:17:03 +0000 Manifest next update: Tue 31 Mar 2026 14:17:03 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: M3+fdBK1FeeymtGYz8cljkZY7//tNky6YjQqPoN6FOo=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: uZMJ3TlRJ4eTxmQnOIB7yl8ezbbbNdE0D+B0/eIsw50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13650 (0x3552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C, serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: Mar 24 14:17:03 2026 GMT Not After : Mar 31 14:17:03 2026 GMT Subject: CN=69c29cdf-be9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:87:0a:ad:11:2b:14:b9:51:88:5e:b9:5b:8d: bc:44:bd:cc:2b:da:22:48:fa:2f:c3:a7:5f:ca:bf: 54:7a:57:6c:14:5e:58:90:5a:6c:23:70:19:0a:35: 7a:8c:e7:b9:ff:a6:73:f6:e3:83:38:a4:02:2f:49: 9e:32:8d:9c:52:60:94:6f:b5:5b:49:ce:22:0b:7b: d5:94:e8:b8:23:14:1e:8f:a4:07:c8:3c:8f:5e:b5: fc:fd:c7:10:08:26:53:f1:e6:c2:84:bf:a6:4b:43: 06:9b:16:c6:34:02:5c:d6:df:0a:93:4e:42:41:69: cd:bc:87:f5:97:de:f6:1e:ef:8f:c9:59:f3:f3:b0: 76:14:4d:f6:d1:30:31:0e:e1:62:63:df:68:30:ff: 3b:0a:6b:54:1e:8e:b0:1d:b8:b4:7d:00:54:bb:31: 39:74:39:4b:3d:13:61:0f:f2:c1:0a:98:97:45:00: 53:80:bd:b8:dd:fd:9c:44:5c:b8:38:67:3d:54:81: 2b:86:8f:2d:9b:11:2c:df:51:37:c1:96:5c:a7:b7: b9:58:9c:3a:4d:b1:cc:d7:17:2b:b3:ac:fb:da:99: 40:55:46:94:6f:1d:26:12:b9:55:3f:3c:a4:06:25: f8:0f:ec:e8:6f:90:d0:48:5a:d8:b0:b6:02:db:a1: e7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2D:5F:21:FE:FE:84:B0:B8:1D:00:07:5E:85:76:03:2A:8E:35:34 X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:88:e4:78:52:52:c0:2e:4b:55:0a:af:a1:f0:d6:90:08:fb: 71:25:fa:1d:85:f2:e4:13:07:c3:be:c7:da:89:ca:68:3c:1f: 77:77:77:81:65:65:16:ac:97:a2:a7:9f:eb:ae:40:83:f6:ce: 99:b3:86:03:b1:0e:6c:8f:54:01:f3:9d:36:a1:ad:af:8f:17: 13:3f:1c:cd:04:a7:6a:73:1f:c1:55:be:f3:5b:1f:dc:80:fe: 7f:cb:1a:6a:4c:c5:32:97:da:79:e5:ab:84:5d:d8:4a:1c:e6: 3d:a1:3d:be:b3:9f:d5:94:45:6d:40:9c:17:9f:1c:ef:eb:6e: 66:d5:63:aa:99:7c:5c:c7:ee:3f:84:0c:b1:9c:90:f9:92:44: b6:1c:06:6a:6a:50:c1:81:ee:ab:c7:b8:6a:c3:8b:fe:2f:69: 09:ca:b7:69:eb:d2:b1:45:36:b6:11:e3:c2:5c:90:64:7d:c6: e0:a5:05:2e:00:5d:44:f0:4a:9d:a8:11:f1:f6:55:12:bf:5a: 09:0b:b7:92:24:59:26:76:18:cf:1a:9f:18:23:83:9e:6c:b6: 88:80:37:9f:50:15:49:1a:d9:46:78:82:e8:44:88:8a:77:33: 6b:c2:c1:ac:d4:4b:8c:a8:3d:0f:b9:c4:a4:6a:ab:0a:3f:d4: 9a:8e:f5:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjYwMzI0MTQxNzAzWhcNMjYwMzMxMTQxNzAzWjAYMRYwFAYD VQQDEw02OWMyOWNkZi1iZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IcKrRErFLlRiF65W428RL3MK9oiSPovw6dfyr9UeldsFF5YkFpsI3AZCjV6 jOe5/6Zz9uODOKQCL0meMo2cUmCUb7VbSc4iC3vVlOi4IxQej6QHyDyPXrX8/ccQ CCZT8ebChL+mS0MGmxbGNAJc1t8Kk05CQWnNvIf1l972Hu+PyVnz87B2FE320TAx DuFiY99oMP87CmtUHo6wHbi0fQBUuzE5dDlLPRNhD/LBCpiXRQBTgL243f2cRFy4 OGc9VIErho8tmxEs31E3wZZcp7e5WJw6TbHM1xcrs6z72plAVUaUbx0mErlVPzyk BiX4D+zob5DQSFrYsLYC26HnJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHwtXyH+ /oSwuB0AB16FdgMqjjU0MB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUYjkeFJSwC5LVQqvofDWkAj7cSX6HYXy5BMHw77H2onKaDwfd3d3gWVlFqyX oqef665Ag/bOmbOGA7EObI9UAfOdNqGtr48XEz8czQSnanMfwVW+81sf3ID+f8sa akzFMpfaeeWrhF3YShzmPaE9vrOf1ZRFbUCcF58c7+tuZtVjqpl8XMfuP4QMsZyQ +ZJEthwGampQwYHuq8e4asOL/i9pCcq3aevSsUU2thHjwlyQZH3G4KUFLgBdRPBK nagR8fZVEr9aCQu3kiRZJnYYzxqfGCODnmy2iIA3n1AVSRrZRniC6ESIincza8LB rNRLjKg9D7nEpGqrCj/Umo71+g== -----END CERTIFICATE-----Generated at Thu Mar 26 05:38:13 2026 by rpki-client